What Is This About?

If you received a letter or email about a data breach from the law firm Sheppard, Mullin, Richter & Hampton LLP (“Sheppard”), your sensitive personal information may be at risk from a recent data breach. Our firm is investigating this incident and can help you understand your rights and legal options.

What Happened?

On August 31, 2026, a Sheppard attorney disclosed certain documents containing personal information to an unauthorized third party as part of a social engineering (i.e. phishing) attack on the firm. Sheppard became aware of the incident on September 1, 2026, upon which they immediately launched an investigation. Sheppard engaged third party forensics and other professionals for its investigation and notified law enforcement. Sheppard has been conducting a thorough review of the impacted files to determine what personal information they contain and to whom that information belongs.

On October 2, 2026, Sheppard notified the Attorneys General of California and Vermont of the breach, reporting in the latter case that Social Security numbers were affected. Sheppard is sending individual notice to persons it has identified as potentially affected.

Sheppard may have possessed personal information related to individuals who worked for Express Services, Inc. d/b/a Express Employment Professionals in California, in connection with legal services Sheppard provided to Express. Express Services itself is not alleged to have experienced this breach.

What Information Was Impacted?

According to Sheppard, the following categories of information may have been compromised:

• Names;
• Social Security numbers; and
• Other sensitive personal information.

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected persons are entitled to compensation. If you received a notice letter or email from Sheppard, Mullin, Richter & Hampton LLP, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.